Smart cards and SSL

nettle has asked for the wisdom of the Perl Monks concerning the following question:

Hello Monks,

I have a digital certificate on a smart card and I want to use it for ssl communication through SSL socket. I planned on using the IO::Socket::SSL module, but it requires the public and private keys to be present(as files or strings). However, I cannot extract the private key from the smart card.

I am using ActivePerl 5.8.8 on Windows XP.

I have figured out how to do data encryption and signing with my smart card through Win32::OLE and CAPICOM, but I have no idea how to do the SSL communication.

Any help will be appreciated.

Comment on Smart cards and SSL Select or Download Code

Replies are listed 'Best First'.
Re: Smart cards and SSL by Khen1950fx (Canon) on May 14, 2007 at 15:39 UTC
I wrote about IO::Socket::SSL not too long ago. See Cert and Key Question. It has some links to the info that you need. Update: For Smart cards, you'll want to check out opensc-project.org and OpenSC Manual	[reply]
Re^2: Smart cards and SSL by nettle (Initiate) on May 15, 2007 at 11:35 UTC
Thank you for your answer. I think I should clarify a bit. I don't have any problem using IO::Socket::SSL with ordinary certificates(meaning, that I have the public and private keys as files). My problem is how to use SSL with smart cards. One cannot extract the private key from a smart card because of security reasons(at least this is the case with the smart card I use). With OpenSC or CAPICOM I can encrypt data with the private key - meaning, that I call the specific function and it returns the encrypted data, but I never have direct access to the private key. So, my question is this: How do I make IO::Socket:SSL call other functions for encrypting data with private key, instead of giving it the private key. Maybe I should use other perl library, but I have no idea which.	[reply]